Ooops, that's Frank Cusack.

And the reasons his is the best PAM_KRB5 I've seen so far are:

 - it handles password aging gracefully:
    - it uses krb5_get_init_creds_password()
    - it has a MIT krb5 <-> PAM prompter function

 - it does NOT use internal MIT krb5 APIs (e.g., the profile library)

 - it's fully configurable via /etc/pam.conf only (Kerberos-specific
   items are configured via /etc/krb5.conf

 - the FreeBSD ports folk have added Heimdal support

Nico

On Tue, Feb 27, 2001 at 12:45:34PM -0500, Nicolas Williams wrote:
> There's many.
>
> Search on Google...
>
> But here's a hint: the best one I've found is Fran Cusack's PAM_KRB5
                                                ^^^^
                                                Frank

> which you can find on http://www.fcusack.com/. The FreeBSD folks have a
> port that includes some patches which I recommend you apply.

[...]

> On Mon, Feb 26, 2001 at 08:26:14PM +0100, Alex Schenkman wrote:
> > Is there a PAM module for Kerberos 5 ?
> >
> > Thanks
> >
> >
> >
> > _______________________________________________
> > Pam-list mailing list
> > Pam-listredhat.com
> > https://listman.redhat.com/mailman/listinfo/pam-list
> --
>
>
>
> _______________________________________________
> Pam-list mailing list
> Pam-listredhat.com
> https://listman.redhat.com/mailman/listinfo/pam-list

--
_______________________________________________
Pam-list mailing list
Pam-listredhat.com
https://listman.redhat.com/mailman/listinfo/pam-list

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]